$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff652568-9428-300d-b00c-c1d280509368.roa File: ff652568-9428-300d-b00c-c1d280509368.roa (raw, json) Hash identifier: ZS3A/L+U+at+wZO1eMm8VL1NaPAG5Z6JXlPoyIS5hvM= Subject key identifier: 20:9C:60:5D:6E:B2:1D:41:F5:D3:6D:01:E9:B5:34:83:5F:24:DA:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A7E7B9FACECEFA19A617E6380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff652568-9428-300d-b00c-c1d280509368.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 173.188.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9f:ac:ec:ef:a1:9a:61:7e:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=8d036dbe-9d12-4d5d-8404-4fa7b3e3c5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9c:9b:51:24:71:3e:ac:8a:6a:21:2f:e3:dd: 2e:2d:0a:0b:8d:a4:9f:a4:4c:c2:9d:9b:41:b1:0e: 53:94:22:eb:96:49:05:3e:01:81:88:4b:ff:12:42: b9:0b:45:4c:fd:79:db:a0:03:5e:05:99:83:48:53: aa:82:ae:c3:7d:4b:a7:7b:65:dd:da:89:1a:35:9c: a2:5c:3e:61:51:50:3e:fa:cb:a1:ab:9c:dd:d4:84: cb:dd:3b:c8:32:98:5b:da:ef:5b:4a:db:3e:16:b6: 18:18:f6:5d:99:da:ab:ba:f7:8d:f3:f8:89:d8:c4: 37:e1:99:ab:4c:73:a8:f9:29:4d:32:3f:1e:ab:cf: f3:a4:0e:70:d0:41:05:9b:8c:56:6f:66:96:5c:cc: 2f:f1:54:4c:c8:0d:94:f7:ae:47:ba:aa:8b:e3:98: 35:6c:6e:54:12:72:bc:a2:dc:3a:e8:67:4d:fd:2d: be:80:2d:37:e1:4c:cc:0b:56:82:df:ac:99:6a:a9: ef:d0:ab:49:75:6e:ef:6b:54:8c:d0:26:ae:72:fa: 6b:99:30:be:25:02:be:27:fe:c8:8a:c4:16:3f:b7: 71:93:f2:2a:1b:1b:4b:71:f0:43:da:b0:44:87:a9: a3:57:d7:79:5d:d8:4e:06:b6:b9:eb:b2:b2:3b:bc: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9C:60:5D:6E:B2:1D:41:F5:D3:6D:01:E9:B5:34:83:5F:24:DA:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff652568-9428-300d-b00c-c1d280509368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:66:98:59:22:6e:b3:62:77:70:55:99:3c:13:20:f2:95:97: 77:01:47:2c:2d:76:e7:c9:76:8f:61:af:ba:bc:eb:57:3c:2b: fe:4a:fc:91:6a:87:3b:ce:cc:05:77:c5:6e:93:ff:9a:8d:48: d1:7b:1f:b0:9a:07:f9:98:7f:ed:ae:e5:62:e2:40:b9:ef:c4: 20:4c:34:aa:9a:67:6a:06:62:58:08:af:30:b6:82:70:ca:73: 98:10:d0:06:1c:02:b9:b6:29:76:c0:d0:0f:f4:aa:58:10:4c: 44:fa:c2:ea:2f:86:a7:ea:69:fc:fd:b0:71:b5:e6:29:d8:a3: 32:b2:36:ac:d8:d9:e2:bb:88:0d:c9:b4:40:6f:cd:64:f5:fc: 8d:3a:e9:43:9a:c4:08:03:fe:d7:4b:ef:33:ea:30:54:bd:46: 63:79:fe:b1:90:dc:85:86:4e:61:44:d7:4e:54:07:0c:d0:e7: 1f:58:e3:29:3e:4a:34:a9:58:0c:79:0d:49:6f:97:ec:77:34: 09:81:d2:ec:17:6a:0d:72:72:25:28:fe:b5:9a:9f:fe:d6:48: 5b:4f:f3:cf:2d:f0:cb:df:c7:0c:61:f2:04:3f:54:61:1e:5a: bd:28:16:b7:4e:63:0d:8a:f1:25:9d:19:99:44:f8:a4:b0:28: f2:1a:6c:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5+s7O+hmmF+Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk OGQwMzZkYmUtOWQxMi00ZDVkLTg0MDQtNGZhN2IzZTNjNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJybUSRxPqyKaiEv490uLQoLjaSfpEzCnZtB sQ5TlCLrlkkFPgGBiEv/EkK5C0VM/XnboANeBZmDSFOqgq7DfUune2Xd2okaNZyi XD5hUVA++suhq5zd1ITL3TvIMphb2u9bSts+FrYYGPZdmdqruveN8/iJ2MQ34Zmr THOo+SlNMj8eq8/zpA5w0EEFm4xWb2aWXMwv8VRMyA2U965HuqqL45g1bG5UEnK8 otw66GdN/S2+gC034UzMC1aC36yZaqnv0KtJdW7va1SM0CaucvprmTC+JQK+J/7I isQWP7dxk/IqGxtLcfBD2rBEh6mjV9d5XdhOBra567KyO7y9fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCcYF1ush1B9dNtAem1NINfJNqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmY2NTI1NjgtOTQyOC0z MDBkLWIwMGMtYzFkMjgwNTA5MzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBmmFkibrNid3BVmTwTIPKVl3cBRywtdufJdo9hr7q861c8K/5K/JFq hzvOzAV3xW6T/5qNSNF7H7CaB/mYf+2u5WLiQLnvxCBMNKqaZ2oGYlgIrzC2gnDK c5gQ0AYcArm2KXbA0A/0qlgQTET6wuovhqfqafz9sHG15inYozKyNqzY2eK7iA3J tEBvzWT1/I066UOaxAgD/tdL7zPqMFS9RmN5/rGQ3IWGTmFE105UBwzQ5x9Y4yk+ SjSpWAx5DUlvl+x3NAmB0uwXag1yciUo/rWan/7WSFtP888t8Mvfxwxh8gQ/VGEe Wr0oFrdOYw2K8SWdGZlE+KSwKPIabIQ= -----END CERTIFICATE-----Generated at Fri Aug 8 00:45:49 2025 by rpki-client